Mirrors/inspec
2
0
Fork 0
mirror of https://github.com/inspec/inspec synced 2024-12-19 09:33:20 +00:00
Code Issues Projects Releases Packages Wiki Activity
872 commits 459 branches 1906 tags 76 MiB
Commit graph

286 commits

Author SHA1 Message Date
Dominik Richter
2eb94f5e2e be more explicit about detecting unix 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-28 11:06:38 +02:00
Dominik Richter
bc98b3330f feature: add helpers for OS families 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-28 11:06:38 +02:00
Dominik Richter
093600b85f split up os detection for linting 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-26 13:12:52 +02:00
Dominik Richter
d839cbc8f7 lint the profile context 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-26 12:41:13 +02:00
Christoph Hartmann
94ac889ff2 fix robocop lint issues 2015-09-25 19:46:46 +02:00
Dominik Richter
3fe0c90733 overhaul rule structure 
* rename VulcanoBaseRule -> Vulcano::Rule
* initialize rule inside the ProfileContext
* attach all resources to ProfileContext and all rules created within
* rename rule.rb -> dsl.rb, now only containing DSL information
* rename base_rule.rb -> rule.rb, now containing everything for rule

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-25 19:16:32 +02:00
Dominik Richter
6d7a46a589 bugfix: do not allocate pty on ssh by default 
PTY will effectively disable stderr output, so avoid it for now.

It will come up very soon when we get back to sudo; see if fifo or other solutions might be used. Stderr is important for accurate command execution...

For reference see this wonderful explanation:

http://unix.stackexchange.com/a/134169
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-25 13:25:57 +02:00
Dominik Richter
c3d226e4a2 add os detection to ssh backend 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-25 12:37:37 +02:00
Dominik Richter
8fe3b8ad4d add ssh configuration options 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-25 12:37:35 +02:00
Dominik Richter
a051224462 improvement: be explicit on specinfra file content handling 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-25 09:55:48 +02:00
Dominik Richter
773548551d bugfix: specinfra file handling on bsd over ssh 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-25 01:16:39 +02:00
Dominik Richter
5ed71ef444 bugfix: error handling on file backend in specinfra 2015-09-24 22:46:02 +02:00
Dominik Richter
1e5fc59fa8 bugfix: handle selinux label (null) 
Return nil instead of (null), as it is a special output of stat.
 2015-09-24 10:36:21 +02:00
Dominik Richter
7a6675394c bugfix: linux file dont return selinux label ? 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-24 10:36:21 +02:00
Dominik Richter
3ed1c29039 bugfix: linux file content for folder/missing 
Dont return empty strings when reading a directory or if the path doesnt exist. Instead return nil.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-24 10:36:21 +02:00
Christoph Hartmann
c187230336 implement port resource for linux 2015-09-23 18:12:51 +02:00
Christoph Hartmann
52f7ddd899 add comment windows version determination 2015-09-23 13:24:55 +02:00
Christoph Hartmann
18e420bb31 remove windows 2003 r2, shares the same version number as windows 2003, only distinguishes via build number 2015-09-23 13:23:03 +02:00
Dominik Richter
ab155f7db6 bugfix: windows server 2008 detection 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-23 10:38:46 +02:00
Dominik Richter
7ccd88f1a2 improvement: os detection on unix 
provided the platform family hint == "unix" run tests for all supported unix systems
also clarify the role of linux detection as the last step

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 19:43:11 +02:00
Dominik Richter
a9c129540b bugfix: file common for linked_to? tests 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 19:43:11 +02:00
Dominik Richter
f472e8a5c0 expose os to docker backend 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 19:43:11 +02:00
Dominik Richter
5fec383788 bugfix: detect os via unames 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 16:25:17 +02:00
Dominik Richter
c3fa247e6a bugfix: local file owner 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 14:24:22 +02:00
Christoph Hartmann
cf3dddf1a3 add csv support 2015-09-22 02:27:04 +02:00
Christoph Hartmann
b9d4fc6d8c add yaml resource 2015-09-22 02:27:04 +02:00
Christoph Hartmann
0e43d4ca6a add json resource 2015-09-22 02:27:04 +02:00
Christoph Hartmann
42a989606b implement kernel_parameter resource 2015-09-22 02:27:04 +02:00
Christoph Hartmann
ef9471e86c implement kernel_module resource 2015-09-22 02:27:04 +02:00
Dominik Richter
c56dee4d0f implement fake os method for mock backend 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:03 +02:00
Christoph Hartmann
8b6fccee92 implement windows_feature resource 2015-09-22 02:27:03 +02:00
Dominik Richter
0b7eb60028 File.exists? is deprecated in ruby 2.1 
See:
http://ruby-doc.org/core-2.1.0/File.html#method-c-exists-3F

Same for Dir:
http://ruby-doc.org/core-2.1.0/Dir.html#method-c-exists-3F

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:03 +02:00
Dominik Richter
13f7429509 remove commented fedora code 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:03 +02:00
Dominik Richter
e78fbf1b96 move windows OS detection to backend 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:02 +02:00
Dominik Richter
f0215a4380 specinfra backwards compatibility for darwin/osX 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:02 +02:00
Dominik Richter
0ed2f1b535 fix inverted darwin detection 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:02 +02:00
Dominik Richter
ca753cdb83 feature: add os resource 2015-09-22 02:27:02 +02:00
Dominik Richter
50dd82e150 feature: OS detection 2015-09-22 02:27:02 +02:00
Christoph Hartmann
34889913b4 bugfix: fix simplified runner configuration 2015-09-22 02:27:02 +02:00
Dominik Richter
9de015ae2d improvement: simplify runner configuration 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:02 +02:00
Christoph Hartmann
e06eed2178 Merge pull request #19 from chef/improvements 
Improvements
 2015-09-22 02:27:01 +02:00
Dominik Richter
535bddd944 move out local file user/group name 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:01 +02:00
Dominik Richter
9608e2e29b bugfix: specinfra selinux label handling 
as specinfra doesnt work with respond_to?, just call the method and catch the error.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:00 +02:00
Dominik Richter
6c29580de0 enforce file content encoding to utf8 
this is also in line with specinfra compatibility

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:00 +02:00
Dominik Richter
c06fe38981 bugfix: dont strip specinfra file content output 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:00 +02:00
Dominik Richter
61e7559489 fix bsd stat detection 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:00 +02:00
Dominik Richter
13ce808a90 bugfix: specinfra is missing methods for freebsd 
Add getter for user/group/mode for freebsd, as specinfra will execute these calls but not return anything.
 2015-09-22 02:27:00 +02:00
Dominik Richter
a1a0e10c5a extend linux file with bsd stat 
TODO: we must start separating between the different UNIXes and maybe call this something better than LinuxFile, but for now: since most of the things will stay the same, add the bsd stat command as an alternative to the linux stat command and parse its output.
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:00 +02:00
Dominik Richter
82f89aa1db bugfix: dont fail on specinfra selinux_label on freebsd 
the call shouldnt be made, but in case it is, dont just fail mit NoMethodError

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:27:00 +02:00
Christoph Hartmann
21040b9b03 implement service resource for windows 2015-09-22 02:26:59 +02:00
Dominik Richter
f18381a7d3 return nil for specinfra content on directories 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:26:59 +02:00
Dominik Richter
7137a9625b expose backend file path 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:26:58 +02:00
Dominik Richter
d16f76c9ce pull in selinux label on local backend runner 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:26:58 +02:00
Dominik Richter
b13a1b574d let specinfra support empty block device content 2015-09-22 02:26:58 +02:00
Dominik Richter
7f19111b1b bugfix: catch lstat errors on local backend 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:25:52 +02:00
Dominik Richter
ef9b299319 api: specinfra reports nil on non-existent files 
Check the responses and make sure we dont blindly return eg: size=0 or group="" or user="" for files that dont exist.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:25:52 +02:00
Dominik Richter
4aef4821cc bugfix: target_type check for pipe 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:25:52 +02:00
Dominik Richter
b8ae2ee7a3 api: specinfra content returns nil on block_device 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
d2ade9f247 bugfix: nil content on specinfra empty files 
Only return nil for no content on specinfra files if the file actually has any content. ie. when we were not able to read the content then provide the answer of nil. if the file has no content, return an empty string. this leaves the error case where empty files cannot be read, which will not be signaled via content from specinfra.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
d8dea86e6e api: return nil for md5/sha256/content empty 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
e0b89e6ae2 bugfix: return nil on file content read errors 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
2c00423c3e read symlink destination file types 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
6f4f0b570c inject specinfra backend helper into file 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
5f472d9735 use lstat for local backend to read symlinks 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
3e16407454 rename file link_target -> link_path 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
60f9e643aa api: specinfra mtime returns unix seconds 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:30 +02:00
Dominik Richter
04a8cfddf4 ignore exit code on linux stat 
For now: Since stat throws exit code 1 on selinux label checks if no selinux label (or system) is present, it would signal us to disregard results. However, the results are actually complete and can be fully used, with selinux_label becoming "?".

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:29 +02:00
Dominik Richter
526518fabd api: set specinfra product_version + file_version to nil 
whenever the label is empty (typically on all *nix systems) set it to nil instead of ""

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:29 +02:00
Dominik Richter
55bd535599 api: specinfra set selinux label to nil 
Whenever the selinux label is empty, set it to nil instead of '?' or ''.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:29 +02:00
Dominik Richter
534a9ce57a bugfix: always return file stat 2015-09-22 02:17:29 +02:00
Dominik Richter
c86a68950a improvement: add optimized local file module 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:29 +02:00
Christoph Hartmann
6e76dd689e bugfix: set host for ssh config in specinfra 2015-09-22 02:17:28 +02:00
Dominik Richter
8f45afffcd move up specinfra property detection 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:28 +02:00
Dominik Richter
48b25e893d bugfix: specinfra re-detect backend os 
By default it uses the currently running OS on initialization, instead of the OS configured via backend. Force its reinitialization by resetting all properties.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:28 +02:00
Christoph Hartmann
7b5bbc8a5f patch specinfra os detection 2015-09-22 02:17:28 +02:00
Christoph Hartmann
43d49a348f bugfix: require specinfra backend 2015-09-22 02:17:28 +02:00
Dominik Richter
54b37b0b96 unify reporting on concurrent tests 
Take control of the rspec runner loop and make sure all of our concurrent tests are executed in one reporting chain. It goes: Start reporting, concurrently run container+test+kill, stop and publish reporting.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:28 +02:00
Dominik Richter
c6f896cad3 run full docker test in parallel 
With just one more issue left: the formatter is going to report multiple time, including spitting out errors multiple times. Also need to remove some of the custom formatting around the current state of containers.

As a bonus: This further improved testing speed (30% on the current environment) and will allow us to grow the supported platforms for tests easily.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:27 +02:00
Dominik Richter
37ad8f9531 run test setup concurrently + only once 
Instead of having RSpec re-run its world multiple times, run it only once with all tests.

Which leaves us with one more thing to solve: we want to start tests as soon as the container is up and they are set up. At the moment, the containers come up and are set up concurrently, including test registry, but the tests themselves are in simple sequence.

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:27 +02:00
Dominik Richter
eb2e18b75d remove leftover includes 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:17:27 +02:00
Dominik Richter
945dee74cc Merge pull request #10 from chef/oneget 
add oneget resource
 2015-09-22 02:17:27 +02:00
Christoph Hartmann
33f9dd8e87 add oneget resource 2015-09-22 02:17:21 +02:00
Christoph Hartmann
d0d9a66e4a move user default settings to backend 2015-09-22 02:15:43 +02:00
Dominik Richter
3e02e622c5 bugfix: linux file stat parameters and mount 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:43 +02:00
Christoph Hartmann
51fff9104b bugfix: use instance variable, include winrm 2015-09-22 02:15:43 +02:00
Christoph Hartmann
b03db74798 improvement: set default user at a later stage to support user@target 2015-09-22 02:15:43 +02:00
Dominik Richter
74da29c3ed lint vulcano lib files 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:42 +02:00
Dominik Richter
07cb7efe36 lint targets 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:42 +02:00
Dominik Richter
46b300f409 finish linting backend 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:42 +02:00
Dominik Richter
e5686ea4e2 lint backends 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:42 +02:00
Dominik Richter
cfbd5ccfc0 lint plugins 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:42 +02:00
Dominik Richter
6e01505414 lint 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:41 +02:00
Dominik Richter
67b5ecc06e bugfix: force PTY on SSH connection 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:41 +02:00
Christoph Hartmann
1570e8e7af Merge pull request #4 from chef/docker 
Start Docker + SSH backends
 2015-09-22 02:15:41 +02:00
Dominik Richter
1359152fc6 add ssh channels to get command stdout/stderr/status 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:41 +02:00
Dominik Richter
0a13817639 feature: add ssh backend 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:41 +02:00
Dominik Richter
e3373679ec feature: add docker container backend 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:41 +02:00
Christoph Hartmann
238f1b2016 add pip resource to verify gem packages 2015-09-22 02:15:41 +02:00
Christoph Hartmann
bdb859b730 add npm resource to verify gem packages 2015-09-22 02:15:41 +02:00
Dominik Richter
275039dead more rubocop 
Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
 2015-09-22 02:15:41 +02:00